Re: [Clamav-users] Stopping Phish Success

2009-01-23 Thread Nigel Horne
John Horne wrote: > Okay, thanks for this. Stats now enabled on three servers. Thanks! > John. -Nigel -- Director of Product Management (ClamAV), Sourcefire, http://www.sourcefire.com +1 301 518 7944 or +1 706 705 4022 FAX: +44 870 705 9334 ICQ: 20252325 ClamAV is a registered trademark of

Re: [Clamav-users] Stopping Phish Success

2009-01-23 Thread Ian Eiloart
--On 21 January 2009 14:11:32 -0500 Nigel Horne wrote: > Kevin Gagel wrote: >> Is this information publicly viewable anywhere? > > We're working on it making it so right now! > > -Nigel Could I suggest that you consider not publishing data where the numbers are small (small numbers of reports

Re: [Clamav-users] Stopping Phish Success

2009-01-22 Thread John Horne
On Thu, 2009-01-22 at 08:09 +0100, Tomasz Kojm wrote: > On Wed, 21 Jan 2009 22:57:00 + > John Horne wrote: > > > Can I ask how often the stats are collected, and how are they 'sent' to > > ClamAV (e.g. specific port/protocol or just a basic email message)? > > There seems to be little info ab

Re: [Clamav-users] Stopping Phish Success

2009-01-21 Thread Tomasz Kojm
On Wed, 21 Jan 2009 22:57:00 + John Horne wrote: > Can I ask how often the stats are collected, and how are they 'sent' to > ClamAV (e.g. specific port/protocol or just a basic email message)? > There seems to be little info about the stats at all except for the > comments in the freshclam.co

Re: [Clamav-users] Stopping Phish Success

2009-01-21 Thread John Horne
On Wed, 2009-01-21 at 13:19 -0500, Nigel Horne wrote: > Folks, > > We've started to analyse the information that is coming in from users > that have enabled the SubmitDetectionStats of freshclam.conf. > > The heuristic anti-phish code accounts for about 50% of all malware > being caught in the

Re: [Clamav-users] Stopping Phish Success

2009-01-21 Thread Kevin Gagel
Awsome! Kevin W. Gagel Network Administrator Local 5448 My blog: http://mail.cnc.bc.ca/blogs/gagel My shared files: http://mail.cnc.bc.ca/users/gagel --- Original message --- Subject: Re: [Clamav-users] Stopping Phish Success From: Nigel Horne To: ClamAV users ML Date: 21/01/2009 11:12 AM

Re: [Clamav-users] Stopping Phish Success

2009-01-21 Thread Nigel Horne
Kevin Gagel wrote: > Is this information publicly viewable anywhere? We're working on it making it so right now! -Nigel ___ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml

Re: [Clamav-users] Stopping Phish Success

2009-01-21 Thread Nigel Horne
Henry Choi wrote: > Hello Mr. Horne, > > It seems you are making freshclam smarter! This post jogs my desire to tell > freshclam to remove certain categories of Virus definitions and not update > those in the future. The motivation is that I only use ClamAV to scan > specific files on command-li

Re: [Clamav-users] Stopping Phish Success

2009-01-21 Thread Henry Choi
Hello Mr. Horne, It seems you are making freshclam smarter! This post jogs my desire to tell freshclam to remove certain categories of Virus definitions and not update those in the future. The motivation is that I only use ClamAV to scan specific files on command-line. Since I don't scan emails

Re: [Clamav-users] Stopping Phish Success

2009-01-21 Thread Kevin Gagel
Is this information publicly viewable anywhere? Kevin W. Gagel Network Administrator Local 5448 My blog: http://mail.cnc.bc.ca/blogs/gagel My shared files: http://mail.cnc.bc.ca/users/gagel --- Original message --- Subject: [Clamav-users] Stopping Phish Success From: Nigel Horne To: ClamAV

[Clamav-users] Stopping Phish Success

2009-01-21 Thread Nigel Horne
Folks, We've started to analyse the information that is coming in from users that have enabled the SubmitDetectionStats of freshclam.conf. The heuristic anti-phish code accounts for about 50% of all malware being caught in the wild. The most popular virus is the GZC Trojan. Please keep the st